n8n-assistant[bot]
9826eec801
🚀 Release 1.123.74 ( #36683 )
...
Co-authored-by: n8n-release-helper[bot] <265227495+n8n-release-helper[bot]@users.noreply.github.com>
2026-08-20 07:35:45 +00:00
Declan Carroll
6ab893b112
chore: Bump jose to 6.2.9 on 1.x to clear 1 Aikido finding ( #36677 )
2026-08-20 07:14:00 +01:00
n8n-cat-bot[bot]
f1afdf9dbb
chore: Bump jose to 6.2.9 via range override to clear AIKIDO-2026-584205
...
Use the range-based override form `"jose@<6.2.9": "6.2.9"` (matching
master's patched pin) instead of an exact `6.2.5` pin, so any transitive
jose below the patched floor is raised while future deps can still pull
newer. 6.2.5 fell below master's `<6.2.9` patched threshold and would
likely have left the Aikido finding open.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-20 05:54:08 +00:00
n8n-cat-bot[bot]
c0c909d4cf
chore: Bump jose 6.1.3 → 6.2.5 (minor) on 1.x to clear 1 Aikido finding
...
Add a pnpm override to raise the transitive `jose` dependency to 6.2.5,
clearing Aikido finding AIKIDO-2026-584205.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-20 05:17:10 +00:00
Declan Carroll
a9981e484b
chore: Bump strnum 2.2.3 → 2.4.2 (minor) on 1.x to clear 1 Aikido finding ( #36673 )
2026-08-20 06:00:31 +01:00
n8n-cat-bot[bot]
6aca3df80b
chore: Bump strnum 2.2.3 → 2.4.2 (minor) on 1.x to clear 1 Aikido finding
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-20 04:31:45 +00:00
Declan Carroll
77ca098451
chore: Bump highlight.js 11.8.0 → 11.12.0 (minor) on 1.x to clear 1 Aikido finding ( #36672 )
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
2026-08-20 04:50:30 +01:00
n8n-cat-bot[bot]
4c320792db
chore: Bump highlight.js 11.8.0 → 11.12.0 (minor) on 1.x to clear 1 Aikido finding
...
Bumps the frontend catalog entry for highlight.js from 11.8.0 to 11.12.0
to clear Aikido finding AIKIDO-2026-456719. The catalog bump also dedupes
the transitive v-code-diff resolution (11.11.1) up to 11.12.0, so the
lockfile no longer resolves highlight.js below 11.12.0.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-20 03:17:53 +00:00
Declan Carroll
8324fd380e
chore: Bump js-yaml 4.2.0 → 4.3.1 (minor) on 1.x to clear 3 Aikido findings ( #36669 )
2026-08-20 00:30:30 +01:00
n8n-cat-bot[bot]
9d95d48cdb
chore: Bump js-yaml 4.2.0 → 4.3.1 (minor) on 1.x to clear 3 Aikido findings
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-19 22:31:25 +00:00
Declan Carroll
c581ac603f
chore: Bump linkify-it 5.0.1 → 5.0.2 (patch) on 1.x to clear 1 Aikido finding ( #36668 )
2026-08-19 22:40:30 +01:00
n8n-cat-bot[bot]
4bafad7d91
chore: Bump linkify-it 5.0.1 → 5.0.2 (patch) on 1.x to clear 1 Aikido finding
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-19 21:09:51 +00:00
Declan Carroll
b4cecf4788
chore: Bump @langchain/langgraph-checkpoint 1.0.0 → 1.0.3 (patch) on 1.x to clear 1 Aikido finding ( #36666 )
2026-08-19 21:50:30 +01:00
n8n-cat-bot[bot]
900ee39119
chore: Bump @langchain/langgraph-checkpoint 1.0.0 → 1.0.3 (patch) on 1.x to clear 1 Aikido finding
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-19 20:10:42 +00:00
Declan Carroll
b85fb40992
chore: Bump hono 4.12.27 → 4.12.34 (patch) on 1.x to clear 4 Aikido findings ( #36665 )
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
2026-08-19 20:40:30 +01:00
n8n-cat-bot[bot]
9e130cf59f
chore: Bump hono 4.12.27 → 4.12.34 (patch) on 1.x to clear 4 Aikido findings
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-19 19:08:07 +00:00
Declan Carroll
de040ce5e0
chore: Bump tar-fs 2.1.4 → 2.1.5 (patch) on 1.x to clear 1 Aikido finding ( #36663 )
2026-08-19 19:40:30 +01:00
n8n-cat-bot[bot]
54434d6ddd
chore: Bump tar-fs 2.1.4 → 2.1.5 (patch) on 1.x to clear 1 Aikido finding
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-19 18:07:53 +00:00
Declan Carroll
7596c0f810
chore: Bump sanitize-html 2.17.4 → 2.17.5 (patch) on 1.x to clear 1 Aikido finding ( #36661 )
2026-08-19 18:50:30 +01:00
n8n-cat-bot[bot]
22a227a5b2
chore: Bump sanitize-html 2.17.4 → 2.17.5 (patch) on 1.x to clear 1 Aikido finding
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-19 17:13:52 +00:00
Declan Carroll
4f2a5c2033
chore: Bump pg 8.12.0 → 8.21.0 (minor) on 1.x to clear 1 Aikido finding ( #36656 )
2026-08-19 17:50:31 +01:00
n8n-cat-bot[bot]
8340dc2e52
chore: Bump pg 8.12.0 → 8.21.0 (minor) on 1.x to clear 1 Aikido finding
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-19 16:17:06 +00:00
Declan Carroll
a066a973a5
chore: Bump vm2 3.11.4 → 3.11.6 (patch) on 1.x to clear 10 Aikido findings ( #36637 )
2026-08-19 16:50:31 +01:00
n8n-cat-bot[bot]
94387d3fba
chore: Bump vm2 3.11.4 → 3.11.6 (patch) on 1.x to clear 10 Aikido findings
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-19 15:10:37 +00:00
Declan Carroll
f326d32c1b
chore: Bump @intlify/shared 11.1.10 → 11.4.4 (minor) on 1.x to clear 1 Aikido finding ( #36626 )
2026-08-19 15:50:30 +01:00
n8n-cat-bot[bot]
6a2bd2ba7a
chore: Bump @intlify/shared 11.1.10 → 11.4.4 (minor) on 1.x to clear 1 Aikido finding
...
Adds a pnpm override pinning the transitive @intlify/shared to 11.4.4 to
clear AIKIDO-2026-10838. @intlify/shared is only present in the lockfile
(pulled in via vue-i18n), so it is raised through pnpm.overrides.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-19 14:14:28 +00:00
Lorent Lempereur
951edd783a
fix(core): CAT-3451 (backport to 1.x) ( #36593 )
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
2026-08-19 13:22:16 +02:00
n8n-assistant[bot]
1a4cb1caa9
🚀 Release 1.123.73 ( #36562 )
...
Co-authored-by: Matsuuu <16068444+Matsuuu@users.noreply.github.com>
2026-08-19 08:41:57 +03:00
n8n-assistant[bot]
4648e23c3c
chore: Bundle/1.x ( #36559 )
...
Co-authored-by: Matsu <matias.huhta@n8n.io>
Co-authored-by: n8n-assistant[bot] <100856346+n8n-assistant[bot]@users.noreply.github.com>
Co-authored-by: Bernhard Wittmann <bernhard.wittmann@n8n.io>
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
Co-authored-by: yehorkardash <yehor.kardash@n8n.io>
Co-authored-by: Danny Martini <danny@n8n.io>
Co-authored-by: mfsiega <93014743+mfsiega@users.noreply.github.com>
Co-authored-by: n8n-assistant[bot] <n8n-assistant[bot]@users.noreply.github.com>
Co-authored-by: Emilia <100027345+sovietspaceship@users.noreply.github.com>
2026-08-19 07:57:49 +03:00
Mike Repeć
75bedd8eaf
feat(core): Make the vm expression engine the default on 1.x ( #36498 )
...
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
2026-08-18 13:54:47 +01:00
Mike Repeć
4ee48e61a1
fix(core): Acquire expression isolate for dynamic node parameter requests (backport to 1.x) ( #36494 )
...
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
2026-08-18 12:49:07 +02:00
n8n-assistant[bot]
d062821759
🚀 Release 1.123.72 ( #36390 )
...
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
Co-authored-by: n8n-release-helper[bot] <265227495+n8n-release-helper[bot]@users.noreply.github.com>
2026-08-17 07:31:48 +00:00
Declan Carroll
438f3e9ab7
chore: Bump mammoth 1.11.0 → 1.12.1 (minor) on 1.x to clear 2 Aikido findings ( #36365 )
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Has been cancelled
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Has been cancelled
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Has been cancelled
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Has been cancelled
CI: Master (Build, Test, Lint) / Lint (push) Has been cancelled
CI: Master (Build, Test, Lint) / Performance (push) Has been cancelled
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Has been cancelled
2026-08-15 05:50:30 +01:00
n8n-cat-bot[bot]
4512cee8e0
chore: Bump mammoth 1.11.0 → 1.12.1 (minor) on 1.x to clear 2 Aikido findings
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-15 04:10:11 +00:00
Declan Carroll
71e1482f22
chore: Bump @zone-eu/mailsplit 5.4.8 → 5.4.15 (patch) on 1.x to clear 1 Aikido finding ( #36359 )
2026-08-15 03:00:30 +01:00
n8n-cat-bot[bot]
d59af9af43
chore: Bump @zone-eu/mailsplit 5.4.8 → 5.4.15 (patch) on 1.x to clear 1 Aikido finding
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-15 01:14:17 +00:00
Declan Carroll
e267e45760
chore: Bump @xmldom/xmldom 0.8.13 → 0.8.14 (patch) on 1.x to clear 2 Aikido findings ( #36357 )
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
2026-08-14 23:50:30 +01:00
n8n-cat-bot[bot]
69d727b1dc
chore: Bump @xmldom/xmldom 0.8.13 → 0.8.14 (patch) on 1.x to clear 2 Aikido findings
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-14 22:15:17 +00:00
Declan Carroll
763a7b8ed6
chore: Bump isolated-vm 6.1.2 → 6.2.0 (minor) on 1.x to clear 1 Aikido finding ( #36356 )
2026-08-14 23:00:30 +01:00
n8n-cat-bot[bot]
5960ab738b
chore: Bump isolated-vm 6.1.2 → 6.2.0 (minor) on 1.x to clear 1 Aikido finding
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-14 21:10:12 +00:00
Declan Carroll
f41d9c9791
chore: Bump nanoid 3.3.17 → 3.3.18 (patch) on 1.x to clear 2 Aikido findings ( #36264 )
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
2026-08-13 21:50:30 +01:00
n8n-cat-bot[bot]
ed6bf6b9b2
chore: Bump nanoid 3.3.17 → 3.3.18 (patch) on 1.x to clear 2 Aikido findings
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-13 20:11:16 +00:00
Declan Carroll
811c7f93f1
chore: Bump @vue/shared 3.5.13 → 3.5.40 (patch) on 1.x to clear 1 Aikido finding ( #36257 )
2026-08-13 20:10:30 +01:00
n8n-cat-bot[bot]
a66000bc3a
chore: Bump @vue/shared 3.5.13 → 3.5.40 (patch) on 1.x to clear 1 Aikido finding
...
Adds a pnpm override to pin the transitive @vue/shared dependency to
3.5.40, clearing Aikido finding AIKIDO-2026-624585.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-13 18:31:05 +00:00
n8n-cat-bot[bot]
11027dea45
chore: Bump @hono/node-server 1.19.13 → 1.19.15 (patch) on 1.x to clear 1 Aikido finding ( #36191 )
...
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
Co-authored-by: n8n-cat-bot[bot] <n8n-cat-bot[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
Co-authored-by: Declan Carroll <declan@n8n.io>
2026-08-13 15:32:58 +01:00
Declan Carroll
d472e64e0a
chore: Bump @vue/server-renderer 3.5.13 → 3.5.40 (patch) on 1.x to clear 1 Aikido finding ( #36168 )
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
2026-08-13 09:29:37 +01:00
n8n-assistant[bot]
d29aec3de1
🚀 Release 1.123.71 ( #36182 )
...
Co-authored-by: n8n-release-helper[bot] <265227495+n8n-release-helper[bot]@users.noreply.github.com>
2026-08-13 07:28:45 +00:00
n8n-cat-bot[bot]
2f18f9418a
chore: Bump @vue/server-renderer 3.5.13 → 3.5.40 (patch) on 1.x to clear 1 Aikido finding
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-12 19:11:04 +00:00
Declan Carroll
9c5a4d9f94
chore: Bump body-parser 2.2.1 → 2.3.0 (minor) on 1.x to clear 1 Aikido finding ( #36164 )
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
2026-08-12 19:50:30 +01:00
n8n-cat-bot[bot]
58daeb7c0e
chore: Bump body-parser 2.2.1 → 2.3.0 (minor) on 1.x to clear 1 Aikido finding
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-12 16:34:04 +00:00